CVE-2024-57892 ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Addressed in ocfs2 Vulnerabilities Two vulnerabilities in the ocfs2 filesystem have been published, affecting systems that utilize this technology. CVE-2024-57892 addresses a slab-use-after-free issue due to a dangling pointer, while CVE-2024-49877 fixes a possible null pointer dereference in the ocfs2_set_buffer_uptodate function. 3 sources 39